Phase 2 — Microsoft 365
Identity & access
Entra ID, MFA (Multi-Factor Authentication), conditional access, SSO (Single Sign-On), joiners and leavers.
What you will be able to do
- ▸Treat identity as the real perimeter of a small business
- ▸Deploy multi-factor authentication without a staff revolt
- ▸Make onboarding and offboarding repeatable and provable
Lessons
Entra ID: users, groups, roles
Identity is the perimeter. Everything else — files, mail, apps — hangs off the account.
MFA and conditional access that people accept
Multi-factor authentication stops the overwhelming majority of account takeovers. The hard part is rollout, not technology.
Joiners, movers and leavers
Onboarding and offboarding are the two processes that most reveal whether a business's IT (Information Technology) is actually managed.
Area check
Pass at 70% to bank the area.
1. Which MFA method is the weakest of these?
2. The business owner uses their Global Administrator account for daily email. What is the correct advice?
3. First action when offboarding an employee?
4. What is a break-glass account for?
5. Why run quarterly access reviews?